WordPress CVEs

Description

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected WordPress components

• download-shortcode Plugin · download-shortcode
  Confirmed match Homeless
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• werdswords download_shortcode — Up to and including 0.2.3
• werdswords download_shortcode — Version 0.1
• werdswords download_shortcode — Version 0.2
• werdswords download_shortcode — Version 0.2.2

References

• packetstormsecurity.com http://packetstormsecurity.com/files/128024/WordPress-ShortCode-1.1-Local-File-Inclusion.html Exploit
• wordpress.org http://wordpress.org/plugins/download-shortcode/changelog/ Patch
• wordpress.org http://wordpress.org/support/topic/plugin-download-shortcode-security-issue Patch, Vendor Advisory
• wordpress.org http://wordpress.org/support/topic/vulnerability-5 Patch
• www.exploit-db.com http://www.exploit-db.com/exploits/34436 Exploit
• www.securityfocus.com http://www.securityfocus.com/bid/69440 Exploit
• nvd.nist.gov Official NVD record